onelake-catalog-cli

onelake-catalog-cli is a skill for Claude Code from microsoft/skills-for-fabric. It costs 91 tokens per session (5,324 once invoked), scanned A, original, MIT.

A command-line guide for managing a Microsoft Fabric OneLake catalog through Microsoft's web APIs. OneLake is Fabric's shared storage and catalog for an organisation's data.

In plain words
What is it for?
Use it for tenant and data-owner governance checks and for owner-approved catalog changes in Fabric.
Why use it?
It provides a controlled process for auditing and updating catalog ownership, workspaces, labels, tags, certification, and refresh settings.

Skill for Claude Code ✓ vendor

Written for Claude Code: shipped in a Claude Code plugin.

Needs its repository: it reads a path above its own folder, which exists only inside the repository. The line is 1. To find the workspace ID from its name, one call: `az rest --method get --resource "https://api.fabric.microsoft.com" --url "https://api.fabric.microsoft.com.

Part of the fabric-skills plugin — 25 skills shipped together

Good fit Use it for tenant and data-owner governance checks and for owner-approved catalog changes in Fabric.

Compare 6 skills from other repositories ↓
About the project

Microsoft Fabric Skills is a collection of reusable instructions and MCP systems that help AI assistants work with Microsoft Fabric workloads, APIs, queries, and operations. It is intended for users of GitHub Copilot CLI and compatible coding tools; the catalogue entries are the skills, agents, instructions, MCP systems, plugins, and rules distributed by the project.

microsoft/skills-for-fabric · 1,321 stars · on GitHub

Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo
git clone --depth 1 https://github.com/microsoft/skills-for-fabric
agentmods
npx agentmods add skills/microsoft/skills-for-fabric/onelake-catalog-cli

Made for: Claude Code.

Or install fabric-skills, the plugin that ships this one along with the rest of its 25 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for onelake-catalog-cli

README.md
[![agentmods](https://agentmods.dev/badge/skills/microsoft/skills-for-fabric/onelake-catalog-cli/github.svg)](https://agentmods.dev/skills/microsoft/skills-for-fabric/onelake-catalog-cli)
Your own site
<a href="https://agentmods.dev/skills/microsoft/skills-for-fabric/onelake-catalog-cli"><img src="https://agentmods.dev/badge/skills/microsoft/skills-for-fabric/onelake-catalog-cli/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for onelake-catalog-cli

Your own site · 80×15
<a href="https://agentmods.dev/skills/microsoft/skills-for-fabric/onelake-catalog-cli"><img src="https://agentmods.dev/badge/skills/microsoft/skills-for-fabric/onelake-catalog-cli.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 91 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 5,324 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00091 $0.05324
Opus 5.5 $0.00036 $0.02130
Sonnet 5.5 $0.00018 $0.01065
Haiku 4.5 $0.00009 $0.00532

Measured 8d ago against content hash 53545a9d40ad, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

onelake-catalog-cli scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

[OneLake via `curl` (Storage-audience token)](../../common/COMMON-CLI.md#onelake-data-access-via-curl) ·
plugins/fabric-skills/skills/onelake-catalog-cli/SKILL.md · 251 lines

How it starts

The opening of the file, as written. The whole thing — 251 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Telemetry — MANDATORY. Every api.fabric.microsoft.com call must carry x-ms-fabric-skill: onelake-catalog-cli (az rest: --headers "x-ms-fabric-skill=onelake-catalog-cli"), including every LRO poll, fabric_lro and retry. Snippets omit it — add it anyway.

CRITICAL NOTES

  1. To find the workspace ID from its name, one call: az rest --method get --resource "https://api.fabric.microsoft.com" --url "https://api.fabric.microsoft.com/v1/workspaces" --query "value[?displayName=='<name>'] | [0].id" -o tsv (follow continuationToken only if it isn't on the first page; details in COMMON-CLI.md § Finding Workspaces and Items in Fabric).
  2. To find an item's ID, one call: the same on .../v1/workspaces/{ws}/items?type=<Type> with --query "value[?displayName=='<name>'] | [0].id".
  3. Write-gated skill — never call a write API before its gate below has passed. For curation that means the owner reviewed every proposed change and explicitly confirmed — not even a "test" write to check whether a change is allowed or what is already applied.
  4. The item list and Get Item both return an item's tags. An item with no tags has no tags field — that absence means untagged.

OneLake Catalog — CLI Skill (mode dispatcher)

One skill for the OneLake catalog. Govern (catalog health, protection and trust: audits and guarded remediation, by permission tier) and curate (an owner improving specific items' discoverability metadata) are modes, each detailed in a reference loaded on demand. This file picks the mode, holds every write gate, and indexes the references.

Mode selection

Mode Use when Load Writes
curate An owner wants specific items easier to find: a description, a clearer display name, tags, or table and column descriptions (items with a OneLake Tables folder) — one item, an explicit list, or one named workspace's weakly-described items references/curate.md ✅ after the owner approves each suggestion
dataowner-audit A non-admin workspace or domain owner wants governance posture for workspaces they administer (widen to accessible on request; Core API) references/dataowner-audit.md ❌
dataowner-remediate A data owner who is also a domain / workspace / capacity admin fixes a governance finding — single-workspace domain or capacity assignment, workspace tags, refresh, item identity (Core & Power BI APIs, no tenant admin), including dry runs of these references/dataowner-remediate.md ✅ self-service
admin-audit A Fabric tenant admin wants tenant-wide governance posture (/v1/admin/*) references/admin-audit.md; any tenant count starts from admin-audit-scope.md ❌
admin-remediate A Fabric tenant admin makes tenant-wide writes — domains, bulk assignment, domain roles, bulk labels, tenant tag definitions, tenant settings references/admin-remediate.md ✅

Read the full file on GitHub · 251 lines

Files

What ships with it

31 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 251 lines · 91 tokens per session scan A 53545a9d40ad

Subscribe to this mod's changes

onelake-catalog-cli is a skill published in the GitHub repository microsoft/skills-for-fabric (1,321 stars, last pushed yesterday), licensed MIT. It adds 91 tokens to every session and 5,324 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-30.

Related

onelake-catalog-cli compared with skills from other repositories

onelake-catalog-cli next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
onelake-catalog-climicrosoft/skills-for-fabricSkill1.3kyesterdayMITA91Claude Code
imagegenopenai/codexSkill133kyesterdayApache-2.0A113Codex
playwright-climicrosoft/playwrightSkill99kyesterdayApache-2.0A19Claude Code
local-ai-agentsmicrosoft/ai-agents-for-beginnersSkill79k4d agoMITA200Claude Code, Codex
systematic-debuggingobra/superpowersSkill313k3d agoMITA21Claude Code
next-cache-components-adoptionvercel/next.jsSkill143kyesterdayMITA95Claude Code
next-partial-prefetching-adoptionvercel/next.jsSkill143kyesterdayMITA103Claude Code